elixir-pro
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and review user-provided Elixir code and project implementation details, which introduces an ingestion surface for potentially malicious instructions embedded in the data.
- Ingestion points: User-provided code implementations for review and project/runtime versions mentioned in the instructions (SKILL.md).
- Boundary markers: The instructions do not define the use of delimiters or specific prompts to ignore instructions embedded within the code being analyzed.
- Capability inventory: The agent following these instructions is expected to read project files, write code, and use development tools like ExUnit, :observer, and Benchee, providing a significant capability surface for a successful injection.
- Sanitization: The skill lacks procedures for sanitizing or escaping external content before the agent processes it.
Audit Metadata